HIPAA Authorizations in Powells Crossroads

Choose access by person and purpose

Begin with the people who may need to communicate with your healthcare providers or receive information. Consider whether each person needs broad access or access connected to a particular purpose, such as helping coordinate care or keeping family members informed. An authorization can be planned around the recipients and information-sharing needs you identify; avoid treating every trusted person as needing the same access.

Scope and duration are useful decision points. You might want information available to a person helping you now, while planning different access for someone who may assist over a longer period. Think through what should happen if your circumstances or chosen contacts change, and ask how the document expresses those choices.

• List each intended recipient and the reason that person may need information.
• Note the kinds of information or care-related conversations you want to address.
• Consider how long the authorization should apply and what change in circumstances should prompt a review.

Keep information access separate from decision-making authority

A HIPAA authorization and a healthcare power of attorney serve different purposes. An authorization concerns sharing health information; a healthcare agent’s authority to make decisions is a separate question governed by applicable state law and the relevant healthcare documents. A separate HIPAA authorization alone does not appoint someone to make healthcare decisions.

The relationship between these documents matters. State law can make someone with healthcare authority a HIPAA personal representative, so an agent does not invariably need a separate authorization. That does not mean every person permitted to receive information is also a decision-maker. Review each person’s intended role rather than assuming one document grants every kind of authority.

• Information recipient: may receive information as described in the authorization.
• Healthcare agent or alternate: may have decision-making authority under the applicable healthcare document and law.
• Personal representative: a HIPAA role that can depend on state-law healthcare authority.

Prepare a document-and-contacts checklist

Before discussing changes, gather your current HIPAA authorization, healthcare power of attorney, and advance directive, if you have them. Make a simple comparison chart with each person’s name, intended role, information access, and any duration or limits you want to discuss. Mark any differences between your documents—for example, a person named to receive information who is not the person you intend to make healthcare decisions.

Tennessee’s Advance Directive for Health Care form addresses an agent or alternate and healthcare preferences, and includes instructions about signing and sharing copies. Consider that document alongside your information-sharing choices so the people and roles are clear. Bring questions about how your documents fit together; do not assume an authorization changes healthcare preferences or appoints an agent.

• Current authorization and healthcare planning documents, including any amendments or updates.
• Names and contact details for intended recipients, agents, and alternates.
• A short list of desired access, limits, duration, and any role conflicts to resolve.

Questions to resolve before signing

Ask whether each person’s access should be the same or different, whether your chosen scope matches the reason for sharing, and how the authorization relates to your healthcare agent and advance directive. Ask what steps are appropriate if you want to revise your choices later, and how copies should be shared with the people who need them.

Dale Law Group, PLLC offers HIPAA authorization planning as part of its Tennessee estate-planning services. The firm serves clients in Powells Crossroads and Marion County from its Murfreesboro office; Powells Crossroads is not identified as a firm office.